VulnSocial

CVE-2026-5768Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This allows attackers within BLE range to perform unauthorized control of device functions, including starting/stopping activities, triggering vibrations, causing denial-of-service conditions, and fuzzing characteristic values to induce unexpected behavior. Additionally, the Frontier X mobile application lacks proper BLE device authentication, allowing attackers to impersonate a legitimate Frontier X2 device and connect to the application. By cloning BLE advertisements and exposing expected GATT characteristics, attackers can manipulate activity states and inject fabricated health telemetry such as breathing rate, heart rate, strain, and other health-related data into the mobile application.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-05-31); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-31: 2Mentions · 2026-06-01: 1Technical Details · 2026-05-31: 205-3106-01
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-312
Disclosure2
2026-06-011
Disclosure1
Full discourse3 posts
  • ⚡𝕊ℍ𝔸𝕂𝕀ℝ⚡@S_hacker401
    Disclosure

    CVE-2026-5768 is now public 🚨 Security vulnerabilities affecting the @FourthFrontier Frontier X2 and Frontier X Mobile Application have been publicly disclosed via CISA/VINCEE. Research with @js0n37 https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-148-01 @FourthFrontier #IoTSecurity #CyberSecurity

    Post summary

    CVE‑2026‑5768, affecting FourthFrontier’s Frontier X2 and Frontier X Mobile Application, has been publicly disclosed via CISA/VINCEE, with no exploit, patch, or detailed vulnerability data shared.

    00030107
    516 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5768 The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This all… https://www.cve.org/CVERecord?id=CVE-2026-5768

    Post summary

    The post announces CVE-2026-5768, detailing an unauthenticated BLE read/write flaw on Frontier X2 devices and links to the official CVE record.

    00020332
    57.8K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5768 The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization. This all… https://www.cve.org/CVERecord?id=CVE-2026-5768 ----- Traducción: CVE-2026-5768 El … http://infoflow.cloud`

    Post summary

    It announces CVE‑2026‑5768, describing unauthenticated BLE read/write on critical GATT characteristics on the Frontier X2 device, but provides no PoC, exploit, patch, or evidence of active exploitation.

    0000044
    79 followersView on X

Explore more

Back to dashboard